Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,322 total in npm · sorted newest first- Dec 19, 2025
Malicious code in viktorparserctf7 (npm)
- Dec 19, 2025
Malicious code in viktorparserctf6 (npm)
- Dec 19, 2025
Malicious code in viktorparserctf5 (npm)
- Dec 19, 2025
Malicious code in viktorparserctf4 (npm)
- Dec 19, 2025
Malicious code in viktorparserctf3 (npm)
- Dec 19, 2025
Malicious code in viktorparserctf2 (npm)
- Dec 19, 2025
Malicious code in viktorparserctf (npm)
- Dec 19, 2025
Malicious code in viktor-xml-parser (npm)
- Dec 19, 2025
Malicious code in qwqwqw (npm)
- Dec 19, 2025
Malicious code in pwnxmljs2 (npm)
- Dec 19, 2025
Malicious code in azaza (npm)
- Dec 19, 2025
Malware in viktorparserctf3
1 compromised version
- Dec 19, 2025
Malware in viktorparserctf
1 compromised version
- Dec 19, 2025
Malware in azaza
1 compromised version
- Dec 19, 2025
Malware in qwqwqw
1 compromised version
- Dec 19, 2025
Malware in viktorparserctf5
1 compromised version
- Dec 19, 2025
Malware in viktor-xml-parser
1 compromised version
- Dec 19, 2025
Malware in viktorparserctf9
1 compromised version
- Dec 19, 2025
Malware in viktorparserctf7
1 compromised version
- Dec 19, 2025
Malware in viktorparserctf8
1 compromised version
- Dec 19, 2025
Malware in viktorparserctf6
1 compromised version
- Dec 19, 2025
Malware in viktorparserctf4
1 compromised version
- Dec 19, 2025
Malware in viktorparserctf2
1 compromised version
- Dec 19, 2025
Malware in pwnxmljs2
1 compromised version
- Dec 19, 2025
Malicious code in test-mal-npm-pkg (npm)
- Dec 19, 2025
Malware in test-mal-npm-pkg
1 compromised version
- Dec 19, 2025
Malicious code in adk-github (npm)
- Dec 19, 2025
Malicious code in adk-cli (npm)
- Dec 19, 2025
Malware in adk-cli
1 compromised version
- Dec 19, 2025
Malware in adk-github
1 compromised version
- Dec 19, 2025
Malicious code in ppppparserfruit (npm)
- Dec 19, 2025
Malicious code in cursorparserfruit (npm)
- Dec 19, 2025
Malware in cursorparserfruit
1 compromised version
- Dec 19, 2025
Malware in ppppparserfruit
1 compromised version
- Dec 19, 2025
Malicious code in hubstyletokens (npm)
- Dec 19, 2025
Malware in hubstyletokens
1 compromised version
- Dec 19, 2025
Malicious code in usage-tracker-janus (npm)
- Dec 19, 2025
Malicious code in okta-mfa-library (npm)
- Dec 19, 2025
Malicious code in hubspotter-http (npm)
- Dec 19, 2025
Malicious code in foundations-theming-base (npm)
- Dec 19, 2025
Malware in foundations-theming-base
1 compromised version
- Dec 19, 2025
Malware in okta-mfa-library
1 compromised version
- Dec 19, 2025
Malware in hubspotter-http
1 compromised version
- Dec 19, 2025
Malware in usage-tracker-janus
1 compromised version
- Dec 19, 2025
Malicious code in @xyuxu/i18never (npm)
- Dec 19, 2025
Malware in @xyuxu/i18never
1 compromised version
- Dec 19, 2025
Malicious code in graphlink (npm)
- Dec 19, 2025
Malware in graphlink
1 compromised version
- Dec 19, 2025
Malicious code in tailwind-logic (npm)
- Dec 19, 2025
Malicious code in tailwind-color-shine (npm)
Page 212 of 4,807